Planning Medical Device Registration Timelines in Malaysia

1. Key takeaways

Timeline estimates for Malaysian registration are best understood as ranges derived from industry experience rather than as official commitments. On that basis, a Class A notification typically takes around two to three months, a Class B registration around four to six months, and a Class C or Class D full assessment around six to twelve months. Class B, Class C and Class D devices that hold a recognised country approval and proceed by way of verification sit in the region of four to six months. The ranges overlap because the governing variable is not the class alone but the number of deficiency rounds, which in turn reflects the quality of the file at submission.

• Class A is estimated at roughly two to three months, Class B at four to six months, and Class C or D full assessment at six to twelve months.
• Verification-based Class B, Class C and Class D files are estimated at around four to six months.
• The start-up phase, covering classification, grouping, the AR agreement and the evidence gap analysis, typically takes one to three months.
• The CAB phase runs about one to two months for verification and about three to six months for a full assessment.
• The MDA registration phase, including deficiency rounds, runs about one to three months.
• The AR establishment licence and GDPMD validity form the hidden critical path, since an incomplete AR qualification prevents the file from starting at all.
• CAB scheduling is the second constraint, as popular bodies require QMS audit slots to be secured well in advance.

2. Legal basis

The procedural framework within which these timelines operate is described in MDA/GL/MD-01, which covers application preparation, submission and review, and in MDA/GL/08, which covers re-registration and the five-year validity period. The verification option rests on Circular Letter MDA No. 1/2025, and the service reference for verification-type review is contained in the MDA CAB verification guideline issued in 2025. That guideline indicates an order of magnitude of approximately 30 working days for verification-type review and a similar reference for MDA registration, subject to the commitments in force at the time. These are internal service targets, not statutory deadlines, and the full assessment path carries no uniform timeline commitment at all. One genuinely hard constraint does exist on the procedural side: the payment deadline of 30 days after the payment notice. Non-compliance with that deadline is a procedural failure with consequences for the application, and it is one of the few timing rules that cannot be managed by better planning after the fact.

3. Expert insights

Most timeline plans fail at the front rather than the back. The start-up phase is where the AR agreement is concluded, where classification and grouping are settled, and where the evidence gap analysis is performed, and each of these can invalidate everything downstream if it is wrong. The hidden critical path is the AR’s establishment licence and GDPMD validity: if the AR qualification is not in place, the application cannot begin, regardless of how complete the manufacturer’s technical file may be. That dependency sits outside the manufacturer’s direct control, which is precisely why it needs to be verified before a target date is set rather than assumed.

The second structural constraint is CAB capacity. A CAB with a strong reputation in a given device category will have QMS audit slots committed well ahead, and the assessment phase cannot start until a slot is secured. This produces the counterintuitive result that the fastest path sometimes runs through a body with less queue pressure rather than the most prestigious one, particularly where the file is well prepared and the technical questions are unlikely to be novel. Planning should therefore separate the CAB selection decision from the CAB cost comparison, since the two do not always point in the same direction.

Within these constraints, three actions produce most of the available compression. The first is performing the gap analysis and a CSDT pre-review in advance, which reduces the number of deficiency rounds and therefore removes whole cycles from the middle of the process. The second is designing the verification route deliberately where a recognised approval exists, rather than defaulting to full assessment. The third is grouping multiple SKUs before submission instead of filing them individually and correcting them repeatedly. What cannot be compressed is equally clear: the four CAB assessment elements cannot be skipped, the MDA review and the 30-day payment deadline are fixed, and an unapproved change cannot be carried into a renewal. Recognising which parts of the timeline are elastic and which are not is what makes a plan credible.

4. Practical recommendations

• Build a T-minus countdown table working backwards from the target registration date, marking AR signing, CAB submission, payment and deficiency buffer as the four milestones.
• Review progress against the countdown at a weekly meeting, so that slippage is visible while there is still time to correct it.
• Verify the AR establishment licence and GDPMD validity before setting any target date, since an incomplete AR qualification blocks the start of the process.
• Secure CAB QMS audit capacity early, and treat the scheduling question as separate from the fee negotiation.
• Complete the gap analysis and CSDT pre-review during the start-up phase, when the cost of correction is lowest.
• Design the verification route in advance where a recognised approval is held, rather than allowing the file to default to full assessment.
• Group SKUs before submission and plan the payment step against the 30-day deadline from the payment notice.
• Schedule post-issuance maintenance and renewal as a separate workstream, since that phase is covered in the related articles in this series on maintenance and renewal.

5. Verification checklist

• □ MDA/GL/MD-01 has been reviewed for the procedural steps that underpin the plan.
• □ MDA/GL/08 has been checked for re-registration timing and the five-year validity period.
• □ The MDA CAB verification guideline of 2025 has been reviewed for the 30 working day order of magnitude reference.
• □ Circular Letter MDA No. 1/2025 has been checked where a verification route is contemplated.
• □ Every duration in the plan is labelled as industry experience rather than an official MDA or CAB commitment.
• □ The payment deadline of 30 days after the payment notice is reflected as a fixed milestone with an assigned owner.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Malaysia. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with the MDA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com